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AMENDMENTS TO THE CLAIMS 



1 . (Currently Amended) A key organization method comprising: 

receiving , by a key organization system operable on a computer processor, a first access 
key that grants , to a medical service provider, a patient-defined level of access to a first set of 
medical records; 

receiving , by said key organization system , a second access key that grants , to said 
medical service provider, a patient-defined level of access to a second set of medical records; and 

storing the first and second access keys in a centralized key repository that is 
communicatively accessible by said key organization system; and 

associating, by said key organization system, said first and second access keys with said 
medical service provider . 

2. (Original) The method of claim 1 wherein the first access key is generated by a 
first patient, and the first set of medical records concern the first patient. 

3. (Original) The method of claim 1 wherein the second access key is generated by 
a second patient, and the second set of medical records concern the second patient. 

4. (Currently Amended) The method of claim 1 further comprising controlling, by 
said key organization system, said medical service provider's access to accessing through a client 
e ompu t er connected to a distributed computing network, the first set of medical records by 
allowing said medical service provider to select, from a I im ^ 1 ess keys are 
associated with said medical service provider, a corresponding patient to w 

medical records pertains, using the first access key. 

5. (Currently Amended) The method of claim 4 further comprising accessing, 
t hrough the client computer connected to the distributed computing network, controlling, by said 
L \ c rganizatio i mc.h. said medical service provider's access to the second set of medical 
records using the second access key, by allowing said medical service provider to select, from 
said list of patients, a corresponding patient to whom the second set of medical records pertains. 
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6. (Cancel) 

7. (Original) The method of claim 1 further comprising storing the first and second 
medical records on a centralized medical record repository. 

8. (Original) The method of claim 7 wherein the centralized medical record 
repository and centralized key repository reside on and are executed by a remote server 
connected to a distributed computing network. 

9. (Original) The method of claim 8 wherein: 
the remote server is a web server; and 

the distributed computing network is the Internet. 

1 0. (Original) The method of claim 1 wherein the first set of medical records is a 
multi-portion medical record and the first access key provides access to one or more portions of 
the first set of medical records. 

1 1 . (Original) The method of claim 1 wherein the second set of medical records is a 
multi-portion medical record and the second access key provides access to one or more portions 
of the second set of medical records. 
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12. (Currently Amended) A key distribution method comprising: 

receiving, by the key organization system from a first patient using a client computer, a 
first access key that grants , to a medical service provider, a patient-defined level of access to a 
first set of medical records; 

receiving, by the key organization system from a second patient using a second client 
computer , a second access key that grants , to said medical service provider, a patient-defined 
level of access to a second set of medical records; and 

associating, by said key organization system, said first and second access keys to said 
medical service provider; 

storing , by said key organization system, the first and second access keys and said 
association in a centralized key repository ; and 

receiving, by said key organization system, a request from said medical service provider 
to access said first or second set of medical records and, responsive to said request, controlling 
access to said requested set of medical records using said first or second access key, wherein 
input of said first or second access key from said medical service provider is not required by said 
key organization system . 

1 3 . (Currently Amended) The method of claim 1 2 further comprising accessing 
controlling, by sai d I e_ org \ i g ation system, said medical service provider's access to the first 
set of medical records using the first access key, by receiving input from said medical service 
provider lb'- s. iccdn g. from a list of patients for whom access s ,» c as-nc kucd with said 
medical service provider, a corresponding patient to whom the first set of medical records 
pertains. 

14. (Currently Amended) The method of claim 12 further comprising ac cessing 
controlling, by said key organization system, said medical service provider's access to the 
second set of medical records using the second access key, by receiving input from said medical 
service provider for selecting, from a list of patients for whom access keys are associated wi t h 

vie - . a corresponding patient to whom the second ^ 

pertains. 
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15. (Original) The method of claim 12 further comprising storing the first and second 
medical records on a centralized medical record repository. 

1 6. (Currently Amended) The method of claim 1 5 wherein the centralized medical 
record repository and centralized key repository reside on and are accessible through said key 
organization system ex ecuted by a remote server connected to a distributed computing network. 

1 7. (Original) The method of claim 12 wherein the first set of medical records is a 
multi-portion medical record and the first access key provides access to one or more portions of 
the first set of medical records. 

1 8. (Original) The method of claim 12 wherein the second set of medical records is a 
multi-portion medical record and the second access key provides access to one or more portions 
of the second set of medical records. 

1 9. (Currently Amended) A key organization method comprising: 
maintaining, on a remote server, a centralized key repository and a centralized medical 

record repository; and 

storing a plurality of patient first set of medical records and a second set of medical 
records on the centralized medical record repository, wherein said plurality of patient medical 
records comprise at least of a first set of medical records containing medical information 
pertaining a first patient and a second set of medical records containing medical information 
pertaining a second patient; and 

,u iiiis. i^ukiu m alized key repository, a plurality of access keys that each grant 
patient-defined access rights to a corresponding patient's set of medical records; and 

responsive to a request received from a medical sendee provider to access one of said 

iai\ i K s .v. ti u 22^_K i 1 v. organization system, from said centralized key 

repository a determined one of said access keys that is associated with said medical service 
provider and which corresponds to said requested set of medical records, and controlling, by said 
key organization system, access by said medical service provider to said requested set of medical 
v, v y _v' s using the retrieved access key . 
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20. (Currently Amended) The method of claim 19 further comprising: 
receiving from [[a]] said first patient, a first access key , of said plurality of access keys, 

that grants to said medical service provider a patient-defined level of access to the first set of 
medical records; and 

receiving, from [[a]] said second patient, a second access key , of said plurality of access 
keys, that grants to said medical service provider a patient-defined level of access to the second 
set of medical records. 

21 . (Currently Amended) The method of claim 20 further comprising storing , by said 
key organization system, the first and second access keys in the centralized key repository. 

22. (Currently Amended) The method of claim 19 further comprising accessing, by 
said key organization system, the first set of medical records using the first access key. 

23. (Currently Amended) The method of claim 19 further comprising accessing, by 
said kc\ oi g ani/a tion s; len Lhe second set of medical records using the second access key. 

24. (Currently Amended) The method of claim 19 wherein the centralized medical 
record repository and centralized key repository reside on and are executed by a remote server 
connected to a distributed computing network and are communicatively coupled to said key 
organization system . 

25. (Original) The method of claim 24 wherein: 
the remote server is a web server; and 

the distributed computing network is the Internet. 
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26. (Original) The method of claim 19 wherein the first set of medical records is a 
multi-portion medical record and the first access key provides access to one or more portions of 
the first set of medical records. 

27. (Original) The method of claim 19 wherein the second set of medical records is a 
multi-portion medical record and the second access key provides access to one or more portions 
of the second set of medical records. 

28. (Currently Amended) A key organization system comprising: 

a server system including a computer processor and associated memory, the server 
system having a centralized key repository and a centralized medical record repository; 
wherein the server system is configured to: 

store a first set of medical records and a second set of medical records on the centralized 
medical record repository; 

receive a first access key associated with a medical service provider that grants to said 
i 1 sem i pi \uient-defined level of access to the first set of medical records; 

receive a second access key associated with said medical service provider that grants to 
said medical service provider a patient-defined level of access to the second set of medical 
records; and 

store the first access key and the second access key on the centralized key repository ; and 
wherein th e key org; li gation system is configured to. responsive to receipt of a request 
from the medical service provider to access one of said first and second sei oi'iiKuical records, 
retrieve a determined one of the first and second access keys from the centralized key repository 
and use the retrieved access key to control access by said medical service provider to said 
requested set of medical records . 
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29. (Currently Amended) The system of claim 28 further comprising a client system 
including a computer processor and associated memory, the client system being configured to: 

communicate said request from said medical service provider to said key organization 
system via a communication network, access t he fi rst set of medical records using the first access 
key; and ac ce s s the second set of medical records using the second acc ess key . 

30. (Original) The system of claim 29 wherein the server system and the client 
system are coupled via a distributed computing network. 

3 1 . (Original) The system of claim 30 wherein the distributed computing network is 
the Internet. 

32. (Original) The system of claim 28 wherein the first set of medical records is a 
multi-portion medical record and the first access key provides access to one or more portions of 
the first set of medical records. 

33. (Original) The method of claim 28 wherein the second set of medical records is a 
multi-portion medical record and the second access key provides access to one or more portions 
of the second set of medical records. 
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34. (Currently Amended) A computer program product residing on a computer 
readable medium having a plurality of instructions stored thereon which, when executed by the 
processor, cause that processor a key organization system to: 

receive , at said key organization system, a first access key that grants to a first medical 
service provider a first patient-defined level of access to a first set of medical records of a 
corresponding patient ; 

receive, at said k . _ i . itn 1 ;\ stem, a second access key that grants to a second 
medical service provider a second patient-defined level of access to a sec on d said first set of 
medical records of said corresponding patient : and 

store the first and second access keys in a centralized key repository ; and 

responsive to a request received from one of said first and second medical service 
providers to access said first set of medical records, retrieve from said centralized key repository 
a determined one of said access keys that is associated with said requesting medical sen ice 
provider, and using the retrieved access key to grant to the requesting medical service provider 
the corresponding patient-defined level of access to said first set of medical records . 
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35. (Currently Amended) A computer program product residing on a computer 
readable medium having a plurality of instructions stored thereon which, when executed by the 
processor, cause that processor a key organization system to: 

receive trans mit , from a first patient at a key organization system , a first access key 
associated with a first medical service provider that grants to said first medical service provider a 
first patient-defined level of access to a first set of medical records; 

receive tran sm it, from a s e con d said patient at said key organization system , a second 
access key associated with a second medical service provider that grants to said second medical 
service provider a second patient-defined level of access to said first a second set of medical 
records; and 

store the first and second access keys in a centralized key repository; 

receive a request from said first medical service provider to access said first set of 
med ical reco rds: and 

retrieve, responsive to said request, said first access key from said centralized key 
repository to provide said first medical service provider with access to said first set of medical 
records wherein input of said first access key from said first medical service provider is not 
required b\ ^ id k e\ o e u , ' < m system . 
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36. (Currently Amended) A computer program product residing on a computer 
readable medium that is communicatively coupled to a server having a plurality of instructions 
stored thereon which, when executed by -fehe-a processor of the server cause a key organization 
system to: 

maintain, on a remote server, a c e n tralized key repository and a centralized medical 
f ecord repository; and 

store a plurality of paticn \ -u >s ciated first set of me dic a l- records and a secon d s e t of 
medical records on the a centralized medical record repository, wherein said plurality of patient- 
associated medical recotd^ c i > nprise at l east of a first set of medical records associated with a 
first patient and a second set of medical records associated with a second patient: 

store a plurality of provider-associated access keys on said a centralized key repository, 
wherein said plurality of provider-associated access keys comprise a first access key that grants a 
patient-defined level of access to the first set of medical records and a second access key that 
grants a patient-defined level of access to the second set of medical records: 

responsive to a received request from a provider to access one of said first and second 
sets of medical records, retrieve from said centralized key repository a respective one of said first 
and second access keys that grants the requesting provider a patient-defined level of access to the 
requested one of said first and second sets of medical records; and 

use sai d retrievec access k ey to grant said requesting provider the corresponding patient- 
defined level of access to the requested one of said first and second sets of medical records . 

37. (New) The method of claim 1 further comprising: 

graining said medical service provider secure access to said key organization system, 
wherein said access allows said medical service provider to select a patient from a group of 
patients associated with said medical service provider. 

38. (New) The method of claim 37 wherein said secure access is granted after said 
medical service provider passes a security test issued by said key organization system. 
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39. (New) The method of claim 37 further comprising: 

receiving, by said key organization system, said selection, wherein said selection is a 
request to access said first set of medical records; 

retrieving from said centralized key repository, by said key organization system in 
response to said selection, said first access key; and 

using, by said key organization system, said first access key to control said medical 
services provider's access to said first set of medical records. 

40. (New) The method of claim 4 wherein accessing the first set of medical records 
does not require said medical service provider to pass a second security test. 
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